you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 month ago (4 children)

Flatpaks and snaps are two examples of deliverables with terribad integration and low SLSA scores. They should be considered toxic.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 11 points 1 month ago* (last edited 1 month ago)

    Snaps I agree just because there is no open source snap store and it’s impossible to set up a 3rd party store.

    Flatpaks though? They let people install packages with weird / rare / not available requirements on any distro. All open source with a really nice sandbox. I think flatpaks are great.

  • source
  • parent
  • [–] 6 points 1 month ago (1 child)

    Let's look at the alternatives:

    • System packages: not viable for the majority of packages because the distro devs don't have time to manually package everything
    • AppImage: even worse integration (like no desktop shortcuts on install). Developer has to guess what libraries need to be included and which ones are already installed by the user. No sandboxing. Probably worse SLSA scores.
    • AUR: even worse security. No sandboxing. Packages are often compromised by hackers.
  • source
  • parent
  • hideshow 1 child comment